Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
File: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft (raw, json)
Hash identifier: R+LXzIgXiZHWIxzMlVAj6wnF9h0eZYw5W00JGUXs9rY=
Subject key identifier: 88:D9:3A:63:2F:7B:BD:BC:0B:04:AB:9C:5D:4B:30:BA:B7:D2:3C:CC
Authority key identifier: FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
Certificate issuer: /CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Certificate serial: 01A0CAB4D099E77B49507E89656612AA1932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
Manifest number: 12FA
Signing time: Tue 22 Sep 2026 20:00:42 +0000
Manifest this update: Tue 22 Sep 2026 20:00:42 +0000
Manifest next update: Wed 23 Sep 2026 20:00:42 +0000
Files and hashes: 1: 1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl (hash: DIyCoiDgeglNkvqjgnzv3CmJv5H0cSuqNzZ9wql7jYc=)
2: SKcH6GqAnwSkb7fUKCyzsH2pE4c.roa (hash: FlzY0BJvsluyy6RMybQuGpqHaLrEW1okMJt3+ASEjLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:d0:99:e7:7b:49:50:7e:89:65:66:12:aa:19:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6df53c9fd2c5fc74f1db71834d7e46a76e91d7
Validity
Not Before: Sep 22 20:00:42 2026 GMT
Not After : Sep 23 20:00:42 2026 GMT
Subject: CN=88d93a632f7bbdbc0b04ab9c5d4b30bab7d23ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:55:33:f2:e8:ee:78:5c:b6:ec:9d:cb:9a:
22:8c:ca:95:73:28:ac:f8:dc:f1:cc:b3:4b:ee:e5:
1e:8a:f4:0d:c9:2c:66:03:82:a7:23:e2:47:2b:3d:
37:a6:de:ea:62:3f:48:1f:e7:86:ad:58:6c:ad:d9:
e1:18:bc:68:0b:95:ed:40:db:b7:75:46:40:78:6e:
46:64:58:f5:e8:2c:d3:33:d7:6c:34:09:e7:b6:48:
f9:b1:3a:91:18:60:a6:e1:cc:1e:8e:5a:4d:53:08:
3f:1d:00:51:8f:24:a7:2d:55:70:ac:ea:84:85:e9:
d1:e0:7d:56:f7:4f:29:37:6e:71:d9:76:9e:2e:39:
e3:c0:08:80:82:ca:8c:e6:1b:d1:93:7d:05:c7:7c:
e5:0d:11:27:9d:b0:cc:22:d9:83:48:08:23:b1:55:
05:51:1c:c3:d9:12:43:11:1c:68:f8:94:3f:bc:71:
20:4c:df:13:f9:e6:95:7c:12:ca:3b:c0:65:0b:60:
54:c3:18:47:12:05:09:53:8e:55:0f:26:99:ea:65:
02:0f:89:8c:f8:78:1f:5c:02:5f:dd:ed:0e:de:63:
c4:d7:16:9e:50:a3:ef:ea:14:ea:15:8a:df:9a:d3:
1e:81:9a:dd:f9:df:ef:d7:b7:c5:8d:04:bf:70:d6:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D9:3A:63:2F:7B:BD:BC:0B:04:AB:9C:5D:4B:30:BA:B7:D2:3C:CC
X509v3 Authority Key Identifier:
keyid:FA:6D:F5:3C:9F:D2:C5:FC:74:F1:DB:71:83:4D:7E:46:A7:6E:91:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-m31PJ_Sxfx08dtxg01-Rqdukdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a94780-1bf3-467a-9369-e98ff33f697c/1/1-m31PJ_Sxfx08dtxg01-Rqdukdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ed:59:c9:37:39:3b:86:8c:b7:b2:73:9f:b4:31:5b:2f:39:
36:6c:08:1d:83:c0:34:2d:2d:e4:1a:79:29:86:b0:54:c6:09:
07:e3:36:e5:21:da:ba:f3:ef:b4:35:40:8c:69:0e:55:80:c4:
d5:c5:fb:3f:f9:e2:92:ae:84:6e:21:8b:85:6b:a4:c4:78:92:
1c:f2:dd:7c:3f:c5:50:76:e1:45:33:56:36:2a:81:c2:77:3c:
34:ce:94:5d:be:b4:b9:c3:43:b9:30:53:30:65:bf:df:db:cd:
96:58:46:99:d5:b6:fe:96:fc:24:26:b2:ed:02:1b:6c:a7:e5:
f7:a4:a1:4d:72:28:b2:0b:23:16:b1:13:84:cc:74:17:5b:fb:
f9:04:b6:da:fc:c4:ec:75:95:8e:45:7b:87:3c:9c:de:f4:ba:
34:83:9b:6a:f0:c4:64:e9:a5:2c:9c:50:55:73:c5:d7:be:6a:
c4:7b:42:31:f7:c9:16:35:d1:be:12:8c:5b:c4:b2:e9:9c:71:
53:c2:d4:06:58:0d:89:39:1f:70:f1:a9:f1:da:73:af:f9:6b:
23:52:d7:17:f5:24:43:80:ea:16:69:33:f3:7a:bb:15:b4:72:
54:40:57:46:b2:39:6b:b0:27:a7:d4:ca:dc:71:36:4e:53:18:
f0:f4:4b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:52:16 2026 by rpki-client